ENISA (European Union Agency for Cybersecurity)
The EU's cybersecurity agency. It supports EU institutions and member states with threat analysis, certification schemes, exercises and policy advice.
At a glance
- Entity level
- Organisation
- Type
- Public body
- Also known as
- European Union Agency for Cybersecurity
- Flagship output
- ENISA Threat Landscape (latest: ENISA Threat Landscape 2025, 1 October 2025)
- Category
- Cyber & technology risk
- Also covers
- Systemic & global risk reports
- Tier
- Tier 1: EU agency; Threat Landscape is the reference EU cyber threat assessment
- Headquarters
- Athens, Greece
- Coverage
- EU cyber threats, foresight to 2030
- Public access
- Free
- Latest activity seen
- 6 Oct 2025
- Evidence
- Verified
How it produces intelligence
Analysis of thousands of verified incidents from open sources and partner reporting over a 12-month window, plus expert foresight exercises.
Risk themes
Focus regions
Links
What it publishes
| Output | Type | Cadence | Latest edition | Date | |
|---|---|---|---|---|---|
| ENISA Threat Landscape | Threat report | Annual | ENISA Threat Landscape 2025 | 1 Oct 2025 | Visit site |
| Cybersecurity threats foresight (to 2030) | Other | Irregular | Visit site |
Latest findings
Recent public risk calls by ENISA (European Union Agency for Cybersecurity), summarised in our own words. They are its views, not 311's. Follow each source for the original.
Of nearly 4,900 verified EU incidents between mid-2024 and mid-2025, about 80% were hacktivist attacks, mostly low-impact DDoS.
6 Oct 2025 · Horizon: 2024 to 2025 · Source: Security Affairs: Reading the ENISA Threat Landscape 2025 reportPhishing was the leading way in, at about 60% of intrusions, increasingly sold as a subscription service. AI was used in most phishing emails seen from late 2024.
6 Oct 2025 · Horizon: 2025 · Source: Security Affairs: Reading the ENISA Threat Landscape 2025 reportRansomware remains the most disruptive and costly threat in the EU, with decentralised groups using multiple layers of extortion.
6 Oct 2025 · Horizon: 2025 · Source: Security Affairs: Reading the ENISA Threat Landscape 2025 reportPublic administration was the most targeted sector, at about 38% of cases, followed by transport. State-linked espionage persisted against telecoms, logistics and manufacturing.
6 Oct 2025 · Horizon: 2025 · Source: Security Affairs: Reading the ENISA Threat Landscape 2025 reportExploitation of vulnerabilities was the initial vector in about 21% of cases, often within days of a flaw being disclosed.
6 Oct 2025 · Horizon: 2025 · Source: Security Affairs: Reading the ENISA Threat Landscape 2025 report
Questions about ENISA (European Union Agency for Cybersecurity)
What is ENISA (European Union Agency for Cybersecurity)?
The EU's cybersecurity agency. It supports EU institutions and member states with threat analysis, certification schemes, exercises and policy advice.
How does ENISA (European Union Agency for Cybersecurity) produce its intelligence?
Analysis of thousands of verified incidents from open sources and partner reporting over a 12-month window, plus expert foresight exercises.
Where is ENISA (European Union Agency for Cybersecurity) based?
ENISA (European Union Agency for Cybersecurity) is based in Athens, Greece.
What does ENISA (European Union Agency for Cybersecurity) cover?
Its work covers cyber, technology & ai, regulation & policy, conflict & security, with a focus on Europe.
Profile compiled by the 311 Strategic Intelligence Unit from public sources. Last checked 21 Oct 2026. Listing is not a ranking or an endorsement. Evidence source. Is this your organisation? Request a correction.